*.20221206.dynamic.prometheus.sd.co.uk

Issued by Amazon RSA 2048 M01

About this certificate

This digital certificate with serial number 0e:7c:d8:00:ce:d1:e8:08:08:f6:46:44:3d:97:aa:33 was issued on by Amazon.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=*.20221206.dynamic.prometheus.sd.co.uk

Amazon

Organization: Amazon
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0e:7c:d8:00:ce:d1:e8:08:08:f6:46:44:3d:97:aa:33
Serial Number (int): 19257417815929202864142953852689689139
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 87:40:ec:c3:45:e9:88:1c:ab:50:09:c4:a1:f9:c3:9d:cf:0b:2b:f4
AuthorityKeyId: 81:b8:0e:63:8a:89:12:18:e5:fa:3b:3b:50:95:9f:e6:e5:90:13:85

Fingerprint (sha1): 59:d5:ea:d4:30:2d:2a:de:64:47:eb:bb:6a:7b:65:33:a5:78:57:37
Fingerprint (sha256): 7c:30:fb:d5:cc:94:38:59:2c:f9:f7:c7:fb:a7:1e:e6:9a:12:cd:0a:b9:c0:ac:42:2c:f3:80:4e:ca:dd:86:c4

Issuing Certificate URL: http://crt.r2m01.amazontrust.com/r2m01.cer

Revocation information

OCSP Server: http://ocsp.r2m01.amazontrust.com
CRL Distribution Point: http://crl.r2m01.amazontrust.com/r2m01.crl

Check the revocation status for certificate *.20221206.dynamic.prometheus.sd.co.uk

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.20221206.dynamic.prometheus.sd.co.uk

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.20221206.dynamic.prometheus.sd.co.uk

Other certificates including the domain name sd.co.uk

(limited to 100 certificates)
*.superdrystore.ch
*.superdrystore.ca
*.prod.maverick.sd.co.uk
*.nonprod.sd.co.uk
cdn.superdry.com
*.digi6723.dynamic.prometheus.sd.co.uk
production.laguna.sd.co.uk
prod.sd.co.uk
*.digi6428.dynamic.prometheus.sd.co.uk
*.eu-west-1.prometheus-prod.sd.co.uk
*.superdry.com
*.testymctestface.dynamic.prometheus.sd.co.uk
prod.fuji.sd.co.uk
*.prod.maverick.sd.co.uk
*.superdry.fr
prod.sd.co.uk
*.superdry.com
image3.nonprod.sd.co.uk
nonprod.henley.sd.co.uk
*.b2c23607.dynamic.prometheus.sd.co.uk
nonprod.henley.sd.co.uk
nonprod.everest.sd.co.uk
*.superdry.nl
prod.windcheater.sd.co.uk
*.superdrystore.pl
*.superdry.fr
production.laguna.sd.co.uk
*.digi6709.dynamic.prometheus.sd.co.uk
nonprod.windcheater.sd.co.uk
*.b2c23400.dynamic.prometheus.sd.co.uk
*.live.fredhopper.prometheus-prod.sd.co.uk
*.prod.maverick.sd.co.uk
*.prod.maverick.sd.co.uk
*.node12.dynamic.prometheus.sd.co.uk
prod.sd.co.uk
prod.surplus.sd.co.uk
nonprod.windcheater.sd.co.uk
production.laguna.sd.co.uk
*.nonprod.sd.co.uk
*.20221212.dynamic.prometheus.sd.co.uk
*.prod.sd.co.uk
*.prod.maverick.sd.co.uk
nonprod.henley.sd.co.uk
*.20221206.dynamic.prometheus.sd.co.uk
cdn.nonprod.sd.co.uk
*.digi6417.dynamic.prometheus.sd.co.uk
prod.sd.co.uk
*.nonprod.maverick.sd.co.uk
prod.management.sd.co.uk
*.digi6678.dynamic.prometheus.sd.co.uk
nonprod.laguna.sd.co.uk
cdn.superdry.com
prod.sd.co.uk
*.superdry.hk
*.superdry.be
prod.sd.co.uk
prod.windcheater.sd.co.uk
prod.fuji.sd.co.uk
nonprod.laguna.sd.co.uk
*.prod.maverick.sd.co.uk
nonprod.surplus.sd.co.uk
nonprod.surplus.sd.co.uk
*.superdry.fr
*.nonprod.sd.co.uk
*.20221210.dynamic.prometheus.sd.co.uk
preprod.everest.sd.co.uk
*.nonprod.sd.co.uk
nonprod.henley.sd.co.uk
*.nonprod.sd.co.uk
*.digi6090.dynamic.prometheus.sd.co.uk
*.b2c23614.dynamic.prometheus.sd.co.uk
*.superdry.dk
*.superdry.it
prod.fuji.sd.co.uk
*.prod.everest.sd.co.uk
*.20221208.dynamic.prometheus.sd.co.uk
*.nfrs.dynamic.prometheus.sd.co.uk
*.nonprod.maverick.sd.co.uk
nonprod.laguna.sd.co.uk
*.digi6679.dynamic.prometheus.sd.co.uk
nonprod.windcheater.sd.co.uk
*.prod.maverick.sd.co.uk
sana.prometheus-prod.sd.co.uk
*.david2.dynamic.prometheus.sd.co.uk
*.nonprod.sd.co.uk
*.superdry.es
*.superdrystore.se
*.20221201.dynamic.prometheus.sd.co.uk
*.nonprod.maverick.sd.co.uk
*.superdry.ie
*.nonprod.maverick.sd.co.uk
prod.sd.co.uk
*.superdrystore.se
*.b2c23734.dynamic.prometheus.sd.co.uk
nonprod.henley.sd.co.uk
*.digi6556.dynamic.prometheus.sd.co.uk
prod.henley.sd.co.uk
*.nonprod.sd.co.uk
*.dantemp.dynamic.prometheus.sd.co.uk
prod.sd.co.uk

Certificate

The complete raw certificate details for *.20221206.dynamic.prometheus.sd.co.uk in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvdfrLieW91xD5p34ORnd
JYhd64/Wp0nsKD8vv4bnySSA+yZhcWXAqcK9sXoHD76U798TKlDjZMZIljdCYe0H
ZOUSEXeUWHKAQ4jhqw5DKNGeGQM+E8jdzA5sVPPv+c3Wb+CNNXq59szDluJs4ndt
FIkICg2FcAxgLiboBVwV6kCOdj/U+ugSvHtRULaNUrFPfOOF6rJxhu7Tm1eB95Jp
o0iGDZLkuVy6t3f6dFqnMRtU6+W0TwjvL1/RJSUtArVX7S6OLkcuIWasDD+01ssr
031aT5bG+2GuAx7zp4rurnf5d7+MzMgMo+AlKMa8mP+SkST54PjH5WPCSVDm/XsM
EQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 19257417815929202864142953852689689139
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M01'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-12-06 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-05 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.20221206.dynamic.prometheus.sd.co.uk'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23965513104568718308114390943402479287065526564597991739093677195737176379329213262911109871028127992186237390246292144386324782480331843999318930942749612743427031033046082376199160050615168262301823935258642307699998175521780512480121238612854309270274848635365250655663848911130546003022800565331625441750801017612337659451254472632850369191641604177187527167092199821103635498600765380378417228717641428484417687569074127834982388324301128052349760005302068474740183193638566526941282859250319363885293663900015548811422132494563997833131923346012593347239034776411987162211019726581099334303243468054298474777617
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 81b80e638a891218e5fa3b3b50959fe6e5901385
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							8740ecc345e9881cab5009c4a1f9c39dcf0b2bf4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (42 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.20221206.dynamic.prometheus.sd.co.uk'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m01.amazontrust.com/r2m01.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m01.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m01.amazontrust.com/r2m01.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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